Exception
Static task
static1
Behavioral task
behavioral1
Sample
521e8b48c7c4d54ffeaee381118505215b0dd36ada17b5452e1eaacac4e3a70e.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
521e8b48c7c4d54ffeaee381118505215b0dd36ada17b5452e1eaacac4e3a70e.exe
Resource
win10v2004-20220414-en
General
-
Target
521e8b48c7c4d54ffeaee381118505215b0dd36ada17b5452e1eaacac4e3a70e
-
Size
380KB
-
MD5
cefeba2bba1776d8b904415f52e14b7f
-
SHA1
733ab20ca21d86cd9a5fe4722c11783e51f88c9f
-
SHA256
521e8b48c7c4d54ffeaee381118505215b0dd36ada17b5452e1eaacac4e3a70e
-
SHA512
c869434f72fecc2b183ffd7d768a891a99e46d323a7f48da4db097f0a13e3510c3279ad8209b5ac2a6249c642ffb3ab749d4b225af5f6e2ee551e235b668c18e
-
SSDEEP
6144:kvKt573yrGYCWQjR9xtBXhoobiF+sXiye5h3G5vvvh6vs:Pt57I1Qj7xmUiXiye5h2D
Malware Config
Signatures
Files
-
521e8b48c7c4d54ffeaee381118505215b0dd36ada17b5452e1eaacac4e3a70e.exe windows x86
d66248c893d491b3ef52eb84d78ab1fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
MapViewOfFile
OpenFileMappingA
Sleep
CancelIoEx
SetConsoleScreenBufferSize
GetCommState
GetConsoleMode
WriteFile
LocalFree
FormatMessageW
GetFullPathNameW
GetLastError
CreateEventW
GlobalFree
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
CreateToolhelp32Snapshot
CreateFileW
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetConsoleCP
SetFilePointer
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
GetFileType
SetHandleCount
Module32FirstW
Module32NextW
SetFileInformationByHandle
VirtualAlloc
GetSystemTime
lstrlenA
SetConsoleTitleA
SetEvent
WaitForMultipleObjects
GlobalAlloc
InitializeSListHead
GetCurrentProcessorNumber
InterlockedPushEntrySList
InterlockedPopEntrySList
CreateThread
GetModuleFileNameW
CreateEventA
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
ReadFileEx
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
HeapReAlloc
VirtualFree
DeleteCriticalSection
HeapSize
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetStdHandle
HeapFree
ExitProcess
CloseHandle
ExitThread
WaitForSingleObject
InterlockedExchange
ResumeThread
QueryPerformanceCounter
QueryPerformanceFrequency
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
GetLocaleInfoA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
user32
SetScrollPos
DeleteMenu
GetSystemMenu
FindWindowExA
wsprintfA
ReleaseDC
FillRect
GetMenu
EndMenu
BeginPaint
EndPaint
GetDC
DestroyWindow
GetIconInfo
GetClipCursor
GetForegroundWindow
GetWindowTextA
GetCursorPos
MessageBoxA
AppendMenuW
GetCursorInfo
ScrollWindowEx
UpdateWindow
GetParent
SendMessageA
GetClientRect
GetWindowRect
LoadBitmapA
PostQuitMessage
DefWindowProcA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
CreateWindowExA
gdi32
SelectObject
BitBlt
DeleteObject
GetStockObject
FillRgn
CreateCompatibleDC
GetObjectA
GetDIBits
CreateBitmap
Rectangle
Ellipse
DeleteDC
SetTextColor
SetBkColor
MoveToEx
LineTo
AddFontResourceExW
winspool.drv
SetPrinterDataExA
DeviceCapabilitiesA
comdlg32
GetOpenFileNameA
shell32
SHGetMalloc
SHAppBarMessage
ole32
CoInitialize
CoGetMalloc
CoCreateInstance
CLSIDFromProgID
oleaut32
VariantClear
GetErrorInfo
SysAllocString
SafeArrayCreate
VariantInit
odbc32
ord71
ord270
avifil32
AVIFileOpenA
AVIFileGetStream
AVIFileInit
AVIStreamOpenFromFileA
AVIStreamStart
AVIStreamLength
msacm32
acmMetrics
acmFormatEnumA
shlwapi
PathRemoveFileSpecW
comctl32
CreateToolbarEx
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ